Privacy policy

TL;DR

• Your reading, hifz, prayer log and dhikr counts stay on your device.
• The Community is the only part with an account: an email address, and what you write there.
• You can delete your account from the app, or from this page, at any time.
• When you recite aloud, your voice is recognised on your phone: it is never sent anywhere and never saved.
• Usage statistics and crash reports go to our own server — never to a third party — and you can turn them off in Settings.
• No advertising identifier, and nothing sold to or shared with advertisers or data brokers.

1. Who we are

This policy applies to the EsSiraj mobile application and the essiraj.com website (together, the "Service") operated by the EsSiraj team ("we", "us", "our"). You can reach us at hello@essiraj.com.

2. The Community: account and content

Reading the Community requires nothing. Writing there requires an account: an email address and a password. Your posts, comments, votes and reports are stored on our server, next to a public identifier such as U-482731 drawn at random — it comes from neither your email nor your name, and your email address is never shown to anyone. Everything else — reading position, hifz, prayer log, dhikr — stays on your device.

3. Data stored on your device

The app stores your reading position, bookmarks, hifz progress, dhikr counters, prayer log and preferences locally on your device so that it works offline. This data never leaves your device. There is no export file and no cloud backup for it today, so deleting the app clears it — and a new phone starts fresh. Programmes are the one exception: with a Community account, a programme and its progress are kept in your private space and return when you sign in.

4. Permissions the app requests

Location is used on your device to compute prayer times and the qibla direction — it is never sent to us. The microphone is requested only when you start a recitation, and you can refuse it: your voice is recognised on the phone by a model stored on it, it is never sent to us or to anyone, and it is not saved — the short passage you can replay after a mistake stays in memory for that session only. Notifications deliver adhan alerts and reminders (if you enable them). Storage keeps downloaded recitations, the hadith library and the voice model for offline use. The camera and contacts are never requested; your photo or music library opens only if you choose a file from it, such as a custom adhan sound.

5. Network requests

The app downloads recitations from public Quran audio libraries (EveryAyah, Islamic Network, QuranicAudio), which receive only the technical request, and the hadith library and the voice model from our own servers. For these two, it sends our delivery service on essiraj.com a random installation identifier, used only to cap downloads per device and prevent abuse. It sends usage statistics and crash reports to a Countly server that we run ourselves: sessions and their length, the screens opened and the features used, the device model and the operating-system and app versions, and — so that we know which remembrances are practised — the text of the dhikr being counted, including ones you wrote yourself. The statistics identifier is created by the app and never linked to a Community account, and your location is not recorded. What you search for, the notes you write and your recitation are never sent. Statistics and crash reports are on by default; you can turn them off at any time in Settings › General › Usage statistics.

6. Third parties

We do not sell or rent your information, and we share none of it with advertisers or data brokers. Two providers process it on our behalf, and only for that: Supabase hosts Community accounts and content (in Frankfurt, Germany), and Cloudflare delivers downloads. They see only what they need to provide that service.

7. Children

EsSiraj is intended for adults: the Community, where members write to each other, is reserved for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, write to hello@essiraj.com and we will delete it.

8. Your rights (GDPR / CCPA)

You can delete your account at any time: in the app, Community › profile › Delete my account, or from this page. Deleting removes your account, your email address and your public identifier; the posts and comments you left keep their text, signed “Deleted user”, so that the discussions others took part in stay readable. For access, correction or any other question, write to hello@essiraj.com — we'll respond within 30 days.

9. Changes to this policy

If we change this policy, we will update the "last updated" date at the top and, for material changes, highlight the change in the app and on this page.

10. Contact

For any privacy-related question, please email hello@essiraj.com.